CVE-2026-27683

published 2026-04-14

CVE-2026-27683: SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a…

medium 4.1 CVSS 3.1

AV N AC L PR L UI R S C C L I N A N

SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—

CWE-79